SPLK-1001 Practice Test

What can be included in the All Fields option in the sidebar?

A.

Dashboards

 

B.

Metadata only

C.

Non-interesting fields

D.

Field descriptions

What syntax is used to link key/value pairs in search strings?

A.

action+purchase

 

B.

action=purchase

 

C.

action | purchase

 

D.

action equal purchase

When viewing the results of a search, what is an Interesting Field?

 

A.

A field that appears in any event

 

B.

A field that appears in every event

 

C.

A field that appears in the top 10 events

 

D.

A field that appears in at least 20% of the events

 

When a Splunk search generates calculated data that appears in the Statistics tab. in what formats can the results be exported?

 

 

A.

CSV, JSON, PDF

 

B.

CSV, XML JSON

C.

Raw Events, XML, JSON

D.

Raw Events, CSV, XML, JSON

Which of the following are functions of the stats command?

 

 

A.

count, sum, add

B.

count, sum, less

 

C.

sum, avg, values

D.

sum, values, table